[docs] Update documentation for features from 2026-04-01

[github-actions]

Documentation Updates - 2026-04-01

This PR updates the documentation based on features merged in the last 24 hours (2026-03-31 to 2026-04-01).

Features Documented

• azd auth token raw token output (from Allow azd auth token to print the raw token by default Azure/azure-dev#7384)
• Key Vault Secret Resolution for extension SDK (from feat(azdext): Add KeyVault resolver for extension secret resolution Azure/azure-dev#7043)
• PromptLocation allowed_locations filter (from Extension Framework - add allowed_locations to PromptLocation and improve AI model capacity resolution Azure/azure-dev#7397)

Changes Made

• Updated cli/azd/docs/external-authentication.md to add a new ## Using azd auth token section documenting:

  • Default raw token output (no flags needed)
  • --output json for structured output with expiration time
  • Available flags (--scope, --tenant-id, --claims)

• Updated cli/azd/docs/extensions/extension-framework.md:

  • Added allowed_locations field to the PromptLocation gRPC service documentation, describing the case-insensitive location filter added by Extension Framework - add allowed_locations to PromptLocation and improve AI model capacity resolution Azure/azure-dev#7397
  • Added a new ## Key Vault Secret Resolution section (feat(azdext): Add KeyVault resolver for extension secret resolution Azure/azure-dev#7043) covering:
    • Automatic host-level resolution of akvs:// and @Microsoft.KeyVault(...) references before extension startup
    • KeyVaultResolver API in pkg/azdext with all three supported formats
    • Public API reference (IsSecretReference, ParseSecretReference, NewKeyVaultResolver, Resolve, ResolveMap, ResolveEnvironment)
    • Example Go code for typical usage
    • Error-handling guidance using KeyVaultResolveError

Merged PRs Referenced

• Allow azd auth token to print the raw token by default Azure/azure-dev#7384 - Allow azd auth token to print the raw token by default
• feat(azdext): Add KeyVault resolver for extension secret resolution Azure/azure-dev#7043 - feat(azdext): Add KeyVault resolver for extension secret resolution
• Extension Framework - add allowed_locations to PromptLocation and improve AI model capacity resolution Azure/azure-dev#7397 - Extension Framework - add allowed_locations to PromptLocation and improve AI model capacity resolution

Notes

• PRs Publish azure.ai.agents 0.1.19-preview to extension registry Azure/azure-dev#7413, Prepare azure.ai.agents 0.1.19-preview patch release Azure/azure-dev#7399 are version/registry-publish PRs — no user-facing doc changes needed.
• PRs Add telemetry tracking with unique rule/diagnostic IDs for preflight validation Azure/azure-dev#7396, fix: remove os.Chdir from aspire server InitializeAsync Azure/azure-dev#7362, fix(azure.ai.agents): skip scale config for vnext hosted agents Azure/azure-dev#7341, Add input validation to gRPC service implementations Azure/azure-dev#7402 are internal/fix changes — no doc updates needed.
• PR docs: comprehensive environment variables documentation Azure/azure-dev#7039 was itself a comprehensive docs PR; no additional updates needed.
• PR chore(deps): bump github.com/buger/jsonparser from 1.1.1 to 1.1.2 in /cli/azd Azure/azure-dev#7380 and chore(deps): bump github.com/buger/jsonparser from 1.1.1 to 1.1.2 in /cli/azd/extensions/microsoft.azd.concurx Azure/azure-dev#7357 are dependency bumps — skipped.

Generated by Daily Documentation Updater · ◷

To install this agentic workflow, run

gh aw add githubnext/agentics/workflows/daily-doc-updater.md@346204513ecfa08b81566450d7d599556807389f

• expires on Apr 3, 2026, 8:10 PM UTC